V2X Misbehavior Detection for Ghost Vehicle Message Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Autonomous driving systems are vulnerable to attacks through V2X communication, where malicious actors can compromise the authenticity and integrity of messages, leading to safety-critical events by mounting fake data attacks, such as ghost vehicle attacks, which can significantly impact vehicle safety.

Innovation Solution

Implementing a misbehavior detection system within roadway systems that includes a misbehavior detection engine to analyze messages for inconsistencies, predict potential misbehavior, and track anomalies, using machine learning models and sensor fusion to validate object reports and detect fake data, thereby flagging untrusted sources and reporting misbehavior to a certificate authority for remediation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of information

If V2X communication is implemented for autonomous driving, then information sharing and coordination between vehicles is improved, but vulnerability to malicious attacks and fake data increases

Engineering Contradiction:
Improveinformation sharingVSAvoidcommunication security
Core Design Contradiction:
Loss of informationVSReliability

Solution Approach 1:

The patent introduces a misbehavior detection engine as an intermediary component that sits between the V2X communication interface and the autonomous driving decision-making system. This engine validates received messages, detects anomalies, and filters out malicious data before it reaches the driving control systems, thus maintaining information sharing while protecting against attacks

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements feedback mechanisms where the misbehavior detection engine continuously monitors incoming V2X messages, compares them against expected patterns and sensor data, and provides feedback by flagging or rejecting suspicious messages. This creates a closed-loop validation system that improves communication reliability without preventing information exchange

Inventive Principle:
Principle #23Feedback

2Reliability

If misbehavior detection system is implemented, then detection of malicious behavior is improved, but system complexity increases

Engineering Contradiction:
Improvemisbehavior detectionVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The misbehavior detection system is segmented into distinct functional modules: message validation module, anomaly detection module, sensor fusion module, and reporting module. Each module handles a specific aspect of detection, making the overall complex system manageable and maintainable while improving detection capability

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The misbehavior detection engine is designed as a universal component that can handle multiple types of V2X messages (cooperative awareness messages, basic safety messages, etc.) and detect various forms of misbehavior (ghost vehicles, spoofing, jamming) using the same core architecture, reducing overall system complexity

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Measurement precision

If sensor fusion and machine learning models are used to validate object reports, then detection precision is improved, but computational requirements and processing time increase

Engineering Contradiction:
Improveobject validation precisionVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary filtering and validation of V2X messages using rule-based checks and simple consistency tests before applying computationally intensive machine learning models and sensor fusion algorithms. This preliminary action reduces the number of messages requiring full processing, thereby reducing overall processing time while maintaining precision

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The misbehavior detection engine applies different levels of validation scrutiny based on the message source, content type, and risk assessment. High-risk messages receive full sensor fusion and machine learning validation, while low-risk messages receive lighter validation, optimizing the balance between precision and processing time

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11553346B2Misbehavior detection in autonomous driving communications
Publication Date: 2023.01.10 INTEL CORP
  • US11553346B2 patent drawing
  • US11553346B2 patent drawing
  • US11553346B2 patent drawing

AI summary

A first roadway system receives a communication from a second roadway system over a wireless channel, where the communication includes a description of a physical object within a driving environment. Characteristics of the physical object are determined based on sensors of the first roadway system. The communication is determined to contain an anomaly based on a comparison of the description of the physical object with the characteristics determined based on the sensors of the first roadway system. Misbehavior data is generated to describe the anomaly. A remedial action is initiated based on the anomaly.